[tests/selinux] main: Reverse-dependency checkpolicy test plan

[Petr Lautrbach <lautrbach@redhat.com>]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : main
            Commit : 698ebbb69a9482bfdad2f75f88894b0f931371f8
            Author : Petr Lautrbach <lautrbach@redhat.com>
            Date   : 2026-09-14T14:57:38+02:00
            Stats  : +31/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/698ebbb69a9482bfdad2f75f88894b0f931371f8?branch=main

            Log:
            Reverse-dependency checkpolicy test plan

Rebuilds checkpolicy package from its source RPM and installs it to the system.
This is necessary for checkpolicy reverse dependecy testing - checkpolicy statically links
libsepol-static and so we need to rebuild checkpolicy and run checkpolicy tests every time
libsepol is updated.

---
diff --git a/plans/revdeps-checkpolicy.fmf b/plans/revdeps-checkpolicy.fmf
new file mode 100644
index 0000000..6a8396c
--- /dev/null
+++ b/plans/revdeps-checkpolicy.fmf
@@ -0,0 +1,31 @@
+summary: Reverse-dependency checkpolicy tests
+
+description: |+
+    Rebuilds checkpolicy package from its source RPM and installs it to the system.
+    This is necessary for checkpolicy reverse dependecy testing - checkpolicy statically links
+    libsepol-static and so we need to rebuild checkpolicy and run checkpolicy tests every time
+    libsepol is updated.
+
+environment:
+    INSTALL_CHECKPOLICY_RPM: true
+prepare:
+    - name: Install epel-release
+      how: shell
+      script: bash -c "dnf -y install epel-release || :"
+      order: 10
+    - name: Enable CRB repo
+      how: shell
+      script: bash -c "crb enable || :"
+      order: 10
+
+discover:
+    - name: rebuild and install checkpolicy
+      how: fmf
+      test:
+        - /other/rebuild-and-install-checkpolicy
+    - name: Run checkpolicy tests
+      how: fmf
+      filter: "component: checkpolicy & tag: -tf_broken"
+
+execute:
+    how: tmt